https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41104

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities:

  - A security feature bypass vulnerability. (CVE-2022-41104)

  - Two remote code execution vulnerabilities. (CVE-2022-41106, CVE-2022-41063)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security     feature and perform unauthorized actions compromising the integrity of the system/application.
    (CVE-2022-41104)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-41063, CVE-2022-41106)

ID	Name	Product	Family	Severity
168223	Security Updates for Microsoft Excel Products C2R (November 2022)	Nessus	Windows	high
167108	Security Updates for Microsoft Excel Products (November 2022)	Nessus	Windows : Microsoft Bulletins	high

CVE-2022-41104

medium

Tenable Plugins

high

high